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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings of claims in the application: 
Listing of Claims: 

1 1 . (Currently amended) In a management system including a management 

2 computer and one or more managed computers to be managed by the management computer, the 

3 management computer comprising: 

4 a communication device configured to receive operating data of a monitoring 

5 object inside a managed computer and information relating to an event; JTand]] 

6 a memory to store the operating data received by the communication device; 

7 a storage device; and 

8 a processor configured to identify from the operating data received by th e 

9 communication d e vic e a portion of the operating data which relates to the event, bas e d on th e 

10 operating data and tho information relating to the ovont indicating trouble occurrence or 

11 performance decrement of tho monitoring object 

12 wherein when the event indicates an occurrence of trouble or a degradation in 

13 performance of the monitoring object, then the operating data received is stored in the storage 

14 device, 

15 wherein when the event does not indicate an occurrence of trouble or a 

16 degradation in performance of the monitoring object, then the operating data received is not 

17 stored in the storage device . 

1 2. (Original) The management computer as set forth in claim 1 , 

2 wherein the information relating to the event includes at least one of information 

3 showing presence or absence of occurrence of the event, information showing an occurrence 

4 time of the event, and information showing a classification of the event, and 

5 wherein the processor of the management computer is configured to identify the 

6 portion of the operating data which relates to the event, based on the operating data and the 
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7 information relating to the event including at least one of the information showing presence or 

8 absence of occurrence of the event, the information showing the occurrence time of the event, 

9 and the information showing the classification of the event. 

1 3. (Original) The management computer as set forth in claim 1, wherein the 

2 management computer is configured to manage a plurality of managed computers, wherein the 

3 communication device is configured to receive operating data of monitoring objects inside the 

4 plurality of managed computers and information relating to an event, wherein the information 

5 relating to an event includes host information identifying from the operating data received by the 

6 communication device a portion of the operating data which is received from the managed 

7 computer in which the event occurred, and wherein the processor of the management computer is 

8 configured to identify the portion of the operating data which relates to the event, based on the 

9 operating data and the information relating to the event including the host information. 

1 4. (Original) The management computer as set forth in claim 3, wherein the 

2 information relating to the event includes information showing presence or absence of 

3 occurrence of the event, and wherein the processor of the management computer is configured to 

4 identify the portion of the operating data which relates to the event, based on the operating data 

5 and the information showing presence or absence of occurrence of the event. 

1 5. (Original) The management computer as set forth in claim 1, wherein the 

2 monitoring object includes at least one of a hardware structure part in a storage device connected 

3 to the management computer through a network and a program stored in the storage device in the 

4 managed computer. 

1 6. (Original) The management computer as set forth in claim 1 wherein the 

2 portion of the operating data identified by the process is to be used for trouble analysis and to 

3 carry out the trouble analysis. 
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1 7. (Currently amended) A management system comprising a management 

2 computer and a managed computer which is managed by the management computer, 

3 wherein the managed computer includes: 

4 a managed computer processor which is configured to obtain operating 

5 data from a monitoring object and to generate information relating to an event , the event 

6 including information indicating trouble occurrence or performance decrement of the monitoring 

7 object when there is an occurrence of trouble or a decrement of performance with the monitoring 

8 object ; and 

9 a managed computer communication device which is configured to 

10 transmit the operating data from the monitoring object and the information relating to the event 

1 1 to the management computer, and 

12 wherein the management computer includes: 

13 a management computer communication device which is configured to 

14 receive from the managed computer communication device the operating data and the 

15 information relating to the event; [[and]] 

16 an operating data buffer to store the operating data received by the 

17 management computer communication device; 

18 a data storage; and 

1 9 a management computer processor which is configured to identify from 

20 the operating data received by the management computer communication device a portion of the 

2 1 operating data relating to the event, based on the portion of the operating data and the 

22 information relating to the event 

23 wherein when the event indicates trouble occurrence or performance 

24 decrement, then the operating data received is stored in the data storage, 

25 wherein when the event does not indicate trouble occurrence or 

26 performance decrement, then the operating data received is not stored in the data storage . 

8. (Canceled) 
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1 9. (Currently amended) The management system as set forth in claim 7, 

2 wherein the management computer further includes an operating data buffer and a 

3 data storage; and 

4 wherein the management computer processor is configured to store the operating 

5 data from the managed computer in the operating data buffer; 

6 wherein the management computer processor is configured, when the information 



7 relating to the event is received, to store the information relating to event in the operating data 

8 buffer in association with the operating data stored in the operating data buffer, to write a part of 

9 the stered-operating data stored and the information relating to the event from the operating data 

10 buffer to the data storage, the part of the stored operating dat a stored to be written to the data 

1 1 storage relating to the event, based on the part of the stored operating data stored and the 

12 information relating to the event written to the data storage. 



1 10. (Currently amended) The management system as set forth in claim 7, 

2 whoroin tho managomont computer further includes an operating data buffer and a 

3 data storage; and 

4 wherein the management computer processor is configured to store the operating 

5 data from the managed computer in the operating data buffer; and 

6 wherein the management computer processor is configured, when the information 



7 relating to the event is received, to store the information relating to event in the operating data 

8 buffer in association with the operating data stored in the operating data buffer, to determine a 

9 part of the operating data to be written from the operating data buffer to the data storage based on 

10 the information relating to the event, and to write the part of the stored operating dat a stored 

1 1 from the operating data buffer to the data storage, and to carry out the trouble analysis based on 

12 the part of the stored operating data stored written to the data storage. 
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1 11. (Currently amended) A management system comprising a management 

2 computer and a managed computer which is subjected to trouble monitoring by the management 

3 computer, 

4 wherein the managed computer includes: 

5 a managed computer processor which is configured to obtain operating 

6 data from a monitoring object and to generate information relating to an event , the event 

7 including information indicating trouble occurrence or performance decrement of the monitoring 

8 object when there is an occurrence of trouble or a decrement of performance with the monitoring 

9 object ; and 

10 a managed computer communication device which is configured to 

1 1 identify the operating data relating to the event and to transmit the identified operating data 

12 identified to the management computer, based on the identified operating data identified and the 

13 information relating to the even^ 

14 wherein when the event indicates trouble occurrence or performance 

15 decrement, then the operating data identified is transmitted to the management computer, 

16 wherein when the event does not indicate trouble occurrence or 

17 performance decrement, then the operating data identified is not transmitted to the 

18 management computer ; and 

1 9 wherein the management computer includes: 

20 a management computer communication device which is configured to 

21 receive the identified operating data identified from the managed computer communication 

22 device; and 

23 a management computer communication processor which is configured to 

24 carry out the trouble analysis based on the received operating data received . 
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1 12. (Currently amended) A management computer for monitoring a 

2 monitoring object, the management computer comprising: 

3 a communication device configured to receive operating data of a monitoring 

4 object and information relating to an event; [[and]] 

5 an operating data buffer to store the operating data received by the 

6 communication device; 

7 a data storage; and 

8 a processor configured to identify from the operating data received by the 

9 communication device a portion of the operating data which relates to the event, based on the 

10 operating data and the information relating to the event indicating trouble occurrence or 

11 performance decrement of the monitoring object 

12 wherein when the event indicates an occurrence of trouble or a degradation in 

13 performance of the monitoring object, then the operating data received is stored in the data 

14 storage. 

15 wherein when the event does not indicate an occurrence of trouble or a 

16 degradation in performance of the monitoring object, then the operating data received is not 

17 stored in the data storage . 

1 13. (Currently amended) The management computer as set forth in claim 12, 

2 wherein the management computer further includes an operating data buffer and a 

3 data storage; and 

4 wherein the processor is configured to store the operating data in the operating 

5 data buffer; and 

6 wherein the processor is configured, when the information relating to the event is 

7 received, to store the information relating to event in the operating data buffer in association with 

8 the operating data stored in the operating data buffer, to write the stored operating data stored 

9 and the information relating to the event from the operating data buffer to the data storage, and to 

10 identify from the operating data a portion of the operating data relating to the event, based on the 

1 1 stored operating data stored and the information relating to the event written to the data storage. 
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1 14. (Currently amended) In a management system including a management 

2 computer and a managed computer to be managed by the management computer, the managed 

3 computer comprising: 

4 a processor configured to obtain operating data from a monitoring object and to 

5 generate information relating to an event , the event including information indicating trouble 

6 occurrence or performance decrement of the monitoring object when there is an occurrence of 

7 trouble or a decrement of performance with the monitoring object ; and 

8 a communication device configured to identify from the operating data obtained 

9 from the monitoring object a portion of the operating data which relates to the event, based on 

10 the operating data and the information relating to the ovont 

11 wherein when the event indicates trouble occurrence or performance decrement, 

12 then the operating data obtained is transmitted to the management computer, 

13 wherein when the event docs not indicate trouble occurrence or performance 

14 decrement, then the operating data obtained is not transmitted to the management computer . 

1 15. (Currently amended) An operating management method for managing 

2 one or more monitoring objects on the basis of operating data, the operating management method 

3 comprising: 

4 receiving the operating data of the monitoring object and information relating to 

5 an event; 

6 storing the operating data in a memory; 

7 identifying from the operating data received by the communication device a 

8 portion of the operating data which relates to the event , based on the operating data and the 

9 information relating to the ovont indicating trouble occurrence or performance decrement of the 

10 monitoring object; and; 

11 storing the operating data in a storage device when the event indicates an 

12 occurrence of trouble or a degradation in performance of the monitoring object, wherein the 

13 operating data is not stored in the storage device otherwise; and 

14 displaying the identified operating dat a identified . 



Page 8 of 16 



Appl.No. 10/660,300 

Amdt. dated December 31, 2007 

Reply to Office Action of August 6, 2007 



PATENT 



1 16. (Original) The operating management method as set for in claim 15, 

2 wherein the information relating to the event includes at least one of information 

3 showing presence or absence of occurrence of the event, information showing an occurrence 

4 time of the event, and information showing a classification of the event, and 

5 wherein the identifying comprises identifying the portion of the operating data 



6 which relates to the event, based on the operating data and the information relating to the event 

7 including at least one of the information showing presence or absence of occurrence of the event, 

8 the information showing the occurrence time of the event, and the information showing the 

9 classification of the event. 

1 17. (Currently amended) The operating management method as set for in 

2 claim 15, wherein the receiving comprises receiving the operating data of a plurality of 

3 monitoring objects, wherein the information relating to ITa nllthe event includes host information 

4 identifying from the rocoivod operating data a portion of the operating data which is received 

5 from the monitoring object in which the event occurred, and wherein the identifying comprises 

6 identifying the portion of the operating data which relates to the event, based on the operating 

7 data and the information relating to the event including the host information. 



1 18. (Original) The operating management method as set for in claim 17, 

2 wherein the information relating to the event includes information showing presence or absence 

3 of occurrence of the event, and wherein the identifying comprises identifying the portion of the 

4 operating data which relates to the event, based on the operating data and the information 

5 showing presence or absence of occurrence of the event. 

19. (Canceled) 

1 20. (Currently amended) In a computer readable medium storing a program 

2 for managing a monitoring object on the basis of operating data, the program comprising: 

3 code for receiving the operating data; 

4 code for storing the operating data in a memory; 
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5 code for identifying from the operating data received by the communication 

6 device a portion of the operating data which relates to the even t, based on the operating data and 

7 the information relating to the event indicating trouble occurrence or performance decrement of 

8 the monitoring object ; [[and]] 

9 code for storing the operating data in a storage device when the event indicates an 

10 occurrence of trouble or a degradation in performance of the monitoring object, wherein the 

11 operating data is not stored in the storage device otherwise; and 

12 code for displaying the identified operating data identified . 
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